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In the Claims: 

Please cancel Claims 1 6, 29, 69-71 , 78-80, and 87-89; amend Claims 58-62, 64-68, 73-77, 
and 82-86; and add Claims 90-95, all as shown below. Applicant reserves the right to prosecute 
any originally presented or canceled claims in a continuing or future application. 

1-56 . (Canceled). 

57. (Original) A system for maintaining security in a distributed computing environment, 
comprising: 

a policy manager for managing a security policy; and 

an application guard for managing access to securable components including at least one 
application as specified by the security policy. 

58. (Currently Amended) The system of Claim 57 A syst e m for ma i ntain i ng s e cur i ty i n a 
distr i but e d comput i ng e nvironm e nt, compr i s i ng: 

a po li cy manag e r for manag i ng a se cur i ty pol i cy; and 

an app li cat i on guard for manag i ng acc e ss to s e curabl e compon e nts including a function 
within [[an]] the application as specified by the security policy. 

59. (Currently Amended) The system of Claim 57 A syst e m for ma i ntain i ng s e cur i ty in a 
d i str i but e d comput i ng e nv i ronm e nt, compris i ng : 

a po li cy manag e r for managing a s e curity po l icy; and 

an app li cat i on guard for manag i ng acc e ss to s e curab le compon e nts including a procedure 
within [[an]] the application as specified by the security policy. 

60. (Currently Amended) The system of Claim 57 A syst e m for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d comput i ng e nv i ronm e nt, compr i s i ng : 

a pol i cy manag e r for managing a s e cur i ty po li cy ; and 
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an app li cation guard for manag i ng acc e ss to se curab le compon e nts including a data 
structure within [[an]] the application as specified by the security policy. 

61 . (Currently Amended) The system of Claim 57 A syst e m for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d comput i ng e nv i ronm e nt, compr isi ng : 

a po li cy manag e r for manag i ng a s e cur i ty po li cy; and 

an app li cat i on guard for manag i ng acc e ss to s e curab le compon e nts including a database 
object w i th i n referenced by [[an]] the application as specified by the security policy. 

62. (Currently Amended) The system of Claim 57 A syst e m for ma i nta i n i ng s e curity in a 
d i str i but e d computing e nv i ronm e nt, compris i ng: 

a pol i cy manag e r for managing a s e cur i ty po li cy; and 

an app li cat i on guard for manag i ng acc e ss to s e curab le compon e nts including a file system 
object referenced by [[an]] the application as specified by the security policy. 

63. (Original) A method for maintaining security in a distributed computing environment, 
comprising: 

managing a security policy via a policy manager; and 

managing access via an application guard to securable components including at least one 
application as specified by the security policy. 

64. (Currently Amended) The method of Claim 63 A m e thod for mainta i n i ng s e cur i ty i n a 
d i str i but e d comput i ng e nv i ronm e nt, compr i s i ng : 

manag i ng a s e cur i ty po li cy v i a a po li cy manag e r; and 

manag i ng acc e ss v i a an app li cat i on guard to s e curab le compon e nts including a function 
within [[an]] the application as specified by the security policy. 
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65. (Currently Amended) The method of Claim 63 A m e thod for mainta i n i ng s e cur i ty in a 
d i str i but e d comput i ng e nv i ronm e nt, compr i s i ng : 

manag i ng a s e cur i ty po li cy v i a a po li cy manag e r; and 

managing access v i a an app l icat i on guard to s e curab le compon e nts including a procedure 
within [[an]] the application as specified by the security policy. 

66. (Currently Amended) The method of Claim 63 A m e thod for ma i ntain i ng s e cur i ty i n a 
distr i but e d comput i ng e nvironm e nt, compris i ng: 

manag i ng a s e cur i ty po li cy v i a a po li cy manag e r; and 

manag i ng acc e ss v i a an app li cat i on guard to s e curab le compon e nts including a data 
structure within [[an]] the application as specified by the security policy. 

67. (Currently Amended) The method of Claim 63 A m e thod for ma i ntain i ng s e cur i ty i n a 
d i str i but e d comput i ng e nvironm e nt, compr i s i ng: 

manag i ng a s e cur i ty policy v i a a po li cy manag e r; and 

manag i ng acc e ss v i a an app li cat i on guard to s e curab le compon e nts including a database 
object referenced by [[an]] the application as specified by the security policy. 

68. (Currently Amended) The method of Claim 63 A m e thod for ma i ntain i ng s e curity in a 
distribut e d computing e nv i ronm e nt, compr i s i ng: 

managing a s e cur i ty po li cy v i a a pol i cy manag e r; and 

manag i ng acc e ss v i a an app li cat i on guard to s e curab le compon e nts including a file system 
object referenced by [[an]] the application as specified by the security policy. 

69-71. (Canceled). 

72. (Original) A method for maintaining security in a distributed computing environment, 
comprising the steps of: 
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providing a policy manager to manage a security policy; and 

providing an application guard to manage access to securable components including at least 
one application as specified by the security policy. 

73. (Currently Amended) The method of Claim 72 A m e thod for ma i nta i n i ng s e cur i ty in a 
d i str i but e d comput i ng e nvironm e nt, compr i s i ng th e st e ps of : 

prov i d i ng a po li cy manag e r to manag e a s e curity pol i cy; and 

prov i ding an app li cation guard to manag e acc e ss to s e curab le compon e nts including a 
function within [[an]] the application as specified by the security policy. 

74. (Currently Amended) The method of Claim 72 A m e thod for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d computing e nv i ronm e nt, compr i s i ng th e st e ps of: 

provid i ng a policy manag e r to manag e a s e curity policy; and 

prov i d i ng an app li cation guard to manag e acc e ss to s e curab le compon e nts including a 
procedure within [[an]] the application as specified by the security policy. 

75. (Currently Amended) The method of Claim 72 A m e thod for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d comput i ng e nv i ronm e nt, compr i s i ng th e st e ps of: 

prov i d i ng a po li cy manag e r to manag e a s e cur i ty po li cy; and 

prov i ding an app li cat i on guard to manag e access to s e curab le compon e nts including a data 
structure within [[an]] the application as specified by the security policy. 

76. (Currently Amended) The method of Claim 72 A m e thod for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d computing e nvironm e nt, compr i s i ng th e st e ps of : 

prov i d i ng a po li cy manag e r to manag e a s e curity pol i cy; and 

prov i d i ng an app li cat i on guard to manag e acc e ss to s e curab le compon e nts including a 
database object referenced by [[an]] the application as specified by the security policy. 
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77. (Currently Amended) The method of Claim 72 A m e thod for ma i nta i n i ng s e cur i ty i n a 
d i str i but e d comput i ng e nv i ronm e nt, compris i ng th e st e ps of: 

provid i ng a po li cy manag e r to manag e a s e cur i ty po li cy; and 

prov i d i ng an app li cat i on guard to manag e acc e ss to s e curabl e compon e nts including a file 
system object referenced by [[an]] the application as specified by the security policy. 

78-80. (Canceled). 

81 . (Original) A computer readable storage medium having stored thereon a method for 
maintaining security in a distributed computing environment comprising the steps of: 

managing a security policy via a policy manager; and 

managing access via an application guard to securable components including at least one 
application as specified by the security policy. 

82. (Currently Amended) The computer readable storage medium of Claim 81 A comput e r 
r e adabl e storag e m e d i um hav i ng stor e d th e r e on a m e thod for ma i nta i n i ng s e cur i ty i n a d i str i but e d 
comput i ng e nvironm e nt compr i sing th e st e ps of : 

managing a s e curity po l icy v i a a po li cy manag e r; and 

managing acc e ss v i a an app li cation guard to securab le compon e nts including a function 
within [[an]] the application as specified by the security policy. 

83. (Currently Amended) The computer readable storage medium of Claim 81 A comput e r 
r e adab le storag e m e d i um hav i ng stor e d th e r e on a m e thod for ma i nta i n i ng s e cur i ty i n a d i str i but e d 
comput i ng e nv i ronm e nt compr i s i ng th e st e ps of: 

manag i ng a s e curity po li cy v i a a po l icy manag e r; and 

manag i ng acc e ss v i a an app l icat i on guard to s e curab le compon e nts including a procedure 
within [[an]] the application as specified by the security policy. 
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84. (Currently Amended) The computer readable storage medium of Claim 81 A comput e r 
r e adabl e storag e m e d i um hav i ng stor e d th e r e on a m e thod for maintaining s e cur i ty i n a d i stribut e d 
comput i ng e nv i ronm e nt compr i s i ng th e st e ps of : 

manag i ng a s e cur i ty po li cy v i a a po li cy manag e r; and 

manag i ng acc e ss v i a an app li cation guard to s e curab le compon e nts including a data 
structure within [[an]] the application as specified by the security policy. 

85. (Currently Amended) The computer readable storage medium of Claim 81 A comput e r 
r e adabl e storag e m e d i um hav i ng stor e d th e r e on a m e thod for ma i nta i n i ng s e cur i ty in a distr i but e d 
comput i ng e nv i ronm e nt compri si ng th e st e ps of: 

manag i ng a s e cur i ty po li cy v i a a po li cy manag e r; and 

manag i ng acc e ss v i a an app li cat i on guard to s e curab le compon e nts including a database 
object referenced by [[an]] the application as specified by the security policy. 

86. (Currently Amended) The computer readable storage medium of Claim 81 A comput e r 
r e adab le storag e m e dium hav i ng stor e d th e r e on a m e thod for ma i nta i n i ng s e curity i n a d i str i but e d 
comput i ng e nvironm e nt, compr i s i ng : 

manag i ng a s e cur i ty po li cy v i a a po l icy manag e r; and 

manag i ng acc e ss v i a an app l icat i on guard to s e curab le compon e nts including a file system 
object referenced by [[an]] the application as specified by the security policy. 

87-89. (Canceled). 

90. (New) The system of claim 57, wherein the application guard further allows for additional 
customized code to process and evaluate authorization requests based on the additional 
customized code. 
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91. (New) The system of claim 90, further comprising a global policy specifying access 
privileges of the user to securable components. 

92. (New) The method of claim 72, wherein the application guard further allows for additional 
customized code to process and evaluate authorization requests based on the additional 
customized code. 

93. (New) The method of claim 92, further comprising the step of providing a global policy 
specifying access privileges of the user to securable components. 

94. (New) The computer readable storage medium of claim 81 , wherein the application guard 
further allows for additional customized code to process and evaluate authorization requests based 
on the additional customized code. 

95. (New) The computer readable storage medium of claim 94, wherein the method further 
comprises the step of providing a global policy specifying access privileges of the user to securable 
components. 
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